Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'm not sure if this is the right place to ask this question. Please tell me, and I'll delete it.

I want to modify a Word document hosted on my OneDrive account. I see that it is using a SSL connection with a valid certificate (https://).

I'm asking, if there is a proxy on my network (I think, there isn't), and I read an encrypted Microsoft Word document, could anyone read it on my browser cache or on that hypothetical proxy?

share|improve this question

closed as unclear what you're asking by TildalWave, Xander, Rory Alsop May 19 at 14:31

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Hi - as Shadur mentioned, this is currently very unclear, and very wide assumptions have had to be made. Can you edit to give some more detail so that Shadur and others can give a full answer. Then we can reopen. –  Rory Alsop May 19 at 14:33
    
Be useful to unhold this as I think it can be answered as is. –  Julian Knight May 19 at 16:12
    
There could be a proxy and it is possible that it might allow access to the document. You could ask this in SuperUser instead. The issue is whether your PC is issued to you by an IT department? If so, it is possible that they have installed an intermediary trusted certificate that allows the proxy to perform a "man in the middle" attack on your connections. This is a very common enterprise configuration. There may be ways of detecting this but it depends heavily on the configuration of your PC. –  Julian Knight May 19 at 16:15

1 Answer 1

I don't use internet explorer myself, and without knowing what kind of proxy your network is using I can only give the vaguest of answers, but here goes:

  • If your network contains a proxy and your browser is configured to use said proxy for https traffic, then anyone with admin access to the machine said proxy is running on can theoretically reconfigure the proxy to provide them with a copy of any traffic going through it.

  • Furthermore, if your connection to the proxy is unencrypted, then anyone with admin access to the network hardware (switches, routers) can use packet capture software like WireShark to intercept and read your traffic.

  • Finally, if someone who isn't you has admin access to your computer, or if your computer and/or browser have been compromised by malware, they might in theory be able to read your browser cache and reconstruct your document from it.

TL;DR You haven't given us nearly enough information to answer your question in anything but the broadest of terms. The answer is "theoretically, yes", but the vagueness of the question renders it as useless as the same answer would be if I were to ask "If I cross the street, could I get hit by a car?" -- it's certainly possible but without context there's no way to estimate likelihood.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.